This is information from multiple sources that is available to the general public

A$.$ OSINT B$.$ bug bounty $C.$ active reconnaissance $D.$ warflying

are the boundaries of a penetration test.

A$.$ persistence B$.$ pivot C$.$ lateral movement $,$ D$.$ rules of engagement $($RoE$)$

What do we need from an organization before we legally do a penetration test on an organization?

A$.$ permission B$.$ internal network credentials

C$.$ nothing

D$.$ IP address

is using tools to gain more information.

A$.$ cleanup

B$.$ pivot

C$.$ persistence

D$.$ rules of engagement $($RoE$)$

What is a way to detect wireless networks, map location of organization, and determine security settings of

an organization?

A$.$ OSINT

B$.$ warflying

C$.$ active reconnaissance

D$.$ bug bounty

What of the following involves creating backdoors, alternate user accounts, and setting up encrypted

connections?

A$.$ privilege escalation $B.$ rules of engagement $(R$@$E).$ pivot $D.$ persistence

In pentesting, these are the referees, so they set the rules of engagement and oversee the testing.

A$.$ Red team

B$.$ White team

C$.$ Purple team

D$.$ Blue team

In pentesting, this is the defensive team, so they use security controls to protect network resources.

A$.$ White team

B$.$ Blue team

C$.$ Purple team

D$.$ Red team

You are a pentester. You know NOTHING about the system you are testing. What kind of testing are you

doing?

A$.$ open box testing

B$.$ translucent box testing

C$.$ cardboard box testing

D$.$ closed box

testing

What of the following is NOT a legal activity?

A$.$ collecting data from a wireless network B$.$ bug bount

C$.$ active

reconnaissance D$.$ collecting data from social media